List of active policies

Full policy

S&B Automotive Academy site policy  

   

Privacy and personal data  

At S&B Automotive Academy we take your privacy very seriously. In order to provide access to the service we must collect and store some personal information about you.  

Minors     

Children under 16 years of age are not permitted to access the services provided by https://apply.sandbaa.com, https://ecourses.sandbaa.com https://www.sandbaa.com https://elog.sandbaa.com, https://auto.sandbaa.com, https://business.sandbaa.com

By agreeing to this privacy policy you are also agreeing that you are 16 years of age or older.  

What is collected?  

Profile information is collected from you when you create your account including your full name, email address and other essential information required to access your chosen apprenticeship or online courses

   

As you use the site, information about the users, courses, activities and resources you interact with will also be stored and linked to your profile information.  

   

How is this information used?     

This information is only used to provide the information required to administer and deliver the S&B Automotive Academy qualifications. Statistical information about usage of the site is also used to improve the site and services provided on the https://apply.sandbaa.com, https://ecourses.sandbaa.com https://www.sandbaa.com https://elog.sandbaa.com, https://auto.sandbaa.com, https://business.sandbaa.com websites.  

   

Who can I contact?  

The data protection officer for S&B Automotive Academy is P Marsh and they may be contacted at pmarsh@sandbaa.com  

   

Who is my data shared with?  

We do not share your data with any other party

How long is my data stored?  

Your personal data is stored as long as you are enrolled in one or more online courses at https://apply.sandbaa.com, https://ecourses.sandbaa.com https://www.sandbaa.com https://elog.sandbaa.com, https://auto.sandbaa.com 

Course data is deleted 6 months after the end date for each course and profile information will be anonymised when an account has not been accessed for 12 consecutive months. Please ensure you have downloaded any certificates, pictures, assignments and any other resource that you want to keep within this time as you NOT be able to retrieve it afterwards 

   

How do I withdraw my consent for S&B Automotive Academy to store and process my personal data?  

If you have previously consented to allow S&B Automotive Academy to store and process your personal data in accordance with this privacy policy, and you wish to withdraw your consent, please send an email to the data protection officer at pmarsh@sandbaa.com. You will no longer be able to access the services provided by https://apply.sandbaa.com, https://ecourses.sandbaa.com https://www.sandbaa.com https://elog.sandbaa.com, https://auto.sandbaa.com, https://business.sandbaa.com if your consent is withdrawn.  

   

How do I request that my personal data is corrected or erased?  

You may make corrections to your basic profile information by logging into the https://apply.sandbaa.com, https://ecourses.sandbaa.com https://www.sandbaa.com https://elog.sandbaa.com, https://auto.sandbaa.com, https://business.sandbaa.com and editing your own profile. If you have questions, or would like any other data to be corrected or erased, please send an email to the data protection officer at pmarsh@sandbaa.com.  

   

How do I request a record of all my personal data that has been collected?  

You may request a record of all of the personal data relating to you that has been collected in accordance with this privacy policy. To do so, please send an email to the data protection officer at pmarsh@sandbaa.com.

Full details of the S&B Automotive Academy Privacy Policy can be found https://sandbacademy.co.uk/images/policy-pdfs/Privacy_Policy_V6_23-24.pdf

Full policy

ILR Privacy Notice – DFE

This privacy notice is issued by the Department for Education (DFE) on behalf of the Secretary of State for the Department of Education (DfE) to inform learners about the Individualised Learner Record (ILR) and how their personal information is used in the ILR. Your personal information is used by the DfE to exercise our functions under article 6(1)(e) of the UK GDPR and to meet our statutory responsibilities, including under the Apprenticeships, Skills, Children and Learning Act 2009. Our lawful basis for using your special category personal data is covered under Substantial Public Interest based in law (Article 9(2)(g)) of GDPR legislation. This processing is under Section 54 of the Further and Higher Education Act (1992).

The ILR collects data about learners and learning undertaken. Publicly funded colleges, training organisations, local authorities, and employers (FE providers) must collect and return the data to the DFE each year under the terms of a funding agreement, contract or grant agreement. It helps ensure that public money distributed through the DFE is being spent in line with government targets. It is also used for education, training, employment, and well-being purposes, including research.

We retain your ILR learner data for 20 years for operational purposes (e.g. to fund your learning and to publish official statistics). Your personal data is then retained in our research databases until you are aged 80 years so that it can be used for long-term research purposes. For more information about the ILR and the data collected, please see the ILR specification at https://www.gov.uk/government/collections/individualised-learner-record-ilr

ILR data is shared with third parties where it complies with DfE data sharing procedures and where the law allows it. The DfE and the English European Social Fund (ESF) Managing Authority (or agents acting on their behalf) may contact learners to carry out research and evaluation to inform the effectiveness of training.

For more information about how your personal data is used and your individual rights, please see the DfE Personal Information Charter (https://www.gov.uk/government/organisations/department-for-education/about/personal-information-charter) and the DfE Privacy Notice (https://www.gov.uk/government/publications/privacy-notice-for-key-stage-5-and-adult-education)

If you would like to get in touch with us or request a copy of the personal information DfE holds about you, you can contact the DfE in the following ways:

·         Using our online contact form https://form.education.gov.uk/service/Contact_the_Department_for_Education

·         By telephoning the DfE Helpline on 0370 000 2288

·         Or in writing to: Data Protection Officer, Department for Education (B2.28), 7 & 8 Wellington Place, Wellington Street, Leeds, LS1 4AW

If you are unhappy with how we have used your personal data, you can complain to the Information Commissioner’s Office (ICO) at:
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF. You can also call their helpline on 0303 123 1113 or visit https://www.ico.org.uk

LRS Privacy Notice – DFE

Overview

To comply with data protection legislation, schools, colleges, local authorities, and training sector organisations are responsible for issuing a copy of this privacy notice to learners and/or parents/guardians. This notice summarises the information held on record about them, why it is held and the third parties with whom the data may be shared.

Privacy notice for pupils, students, learners, and trainees

The information you supply is used by the Learning Records Service (LRS). The LRS issues Unique Learner Numbers (ULN) and creates Personal Learning Records across England, Wales, and Northern Ireland, and is operated by the Department for Education (DfE) in England. This privacy notice explains how we use your personal information. For the purposes of relevant data protection legislation, the DfE is the data controller for personal information processed.

Who we are?

The LRS supports the DfE by collecting learner information from training providers and awarding organisations. For the purposes of relevant data protection legislations, the DfE is the data controller for personal information we process.

How we will use your information

We receive your personal data from:

·         schools, colleges, local authorities, and training/learning providers

·         accredited achievement data supplied by awarding organisations

The aims of LRS are to:

·         create a trusted and verified record of learning for citizen across England, Wales, and Northern Ireland

·         enable education organisations to access these records when required to support individuals with enrolment to education and careers advice, ensuring they get access to the correct education and government funding

·         issue you with a Unique Learner Number (ULN)

·         create your Personal Learning Record (PLR)

·         collect entries and results data that is used to create national statistical publications

The nature of your personal data that LRS will process

The categories of personal data that can be processed in LRS includes:

·         personal contact details

·         data related to an individual’s learning

·         data and information about your learning, including courses and qualifications you are taking or have taken

To ensure that our records are accurate, it may be necessary for training providers to collect further personal information from you. This information will be used to identify the correct learner where their personal information is similar to other learners (e.g. name(s) and date of birth):

·         where further information is required to distinguish between learners, the following personal information is deemed as mandatory:

·         last known post code

·         date of birth

·         gender

Why our use of your personal data is lawful

For our use of your personal data to be lawful, we need to meet one (or more) conditions in the data protection legislation. For LRS, the relevant conditions are:

·         Article 6(1)(e) UK General Data Protection Regulations (GDPR), to perform a public task as part of our function as a department

We also rely on legitimate interests, where we may need to collect additional personal information, to distinguish you from another individual. This is:

·         Article 6(1)(f) of the UK General Data Protection Regulations

Who we will make your personal data available to

We sometimes need to make personal data available to other organisations. These might include contracted partners (who we have employed to process your personal data on our behalf) and/or other organisations (with whom we need to share your personal data for specific purposes).

Where we need to share your personal data with others, we ensure that this data sharing complies with data protection legislation. For LRS we share your personal data with the following:

·         schools, colleges, local authorities, and training/learning providers when you enrol onto a course

·         awarding bodies to record achievement/attainment information such as exam or course grades

·         permitted organisations such as Federation for Industry Skills & Standards (FISSS) and Universities and Colleges Admissions Service (UCAS) to record or verify individual’s qualifications

How long we will keep your personal data

The PLR is a lifetime record of achievement for all learners.

All data in LRS will be retained until a learner is 80 years old and has not engaged with a learning provider for 7 years.

Your data protection rights

You have specific rights under data protection law. You can:

Request a copy of all information relating to you held by the DfE. You can do this by making a Subject Access Request using the DfE Contact Form.

DfE processes your personal information on LRS in the exercise of its official authority under the Education Act 2011 and the Apprenticeships, Skills, Children & Learning Act 2009. This allows us to ensure that training providers are claiming for the correct government funding, safeguard public money and prevent fraud.

More information about how the DfE handles personal information is published in the DfE Personal Information Charter. If you need to contact us regarding any of the above, please do so via the DfE site at DfE - Contact Us. If you are unable to use the online contact form, you can write to us at the address provided under Contact Information below.

Further information about your data protection rights appears on the Information Commissioner’s website at Information Commissioners Office - Individual Rights

 

 

Policy Reviewed on 09 April 2025